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inventive step and industrial applicability 
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1. Basis of the report 



I. With regard to the etanents of the international application;* 
the international application as originally filed, 
the description: 

pages 1-18 as originally filed 

pages NONE , filed with the demand 

pages NONE , filed with the letter of 



□ 



the claims: 

pages 19-22 ^ as originally filed 

pages NONE , as amended (together with any statement) under Article 19 

pages NONE , filed with the demand 

pages NONE , filed with the letter of ,- 

the drawings: 

pages 1;5 , as originally filed 

pages NONE , filed with the demand 

pages NONE , filed with the letter of 

the sequence listing part of the description: 

pages NONE ^ as originally filed 

pages NONE , filed with the demand 

pages NONE , filed with the letter of 



2. With regard to the language, all the elements marked above were available or ftimished to this Authority in the 
language In which the international application was filed, unless otherwise indicated under this item. 

These elements were available or fiiraishcd to this Authoriiy in the following language which is: 

the language of a translation furnished for the purposes of hitemational search (imder Rule23. 1(b)), 

□ 

the language of publication of the international application (under Rule 48.3(b)). 

the language of the translation fiimished for the purposes of international preliminary examination(tmdcr Rules 
55.2 and/or 55.3). 

3. Widi regard to any nucleotide and/or amino acid sequence disclosed in the international application, the 
international prelimmary examination was carried out on the basis of the sequence listing: 

□ 

contained in the international application in printed form. 

□ 

filed together with the international application in computer readable form. 

□ 

furnished subsequently to this Authority in written forai. 

□ 

furnished subsequently to this Authority in computer readable form. 

The statement that the subsequently furnished written sequence listing does not go beyond the disclosure in the 
international application as filed has been furnished. 

The statement that the information recorded in computer readable form is identical to the written sequence listing 
has been furnished 

The amendments have resulted in the cancellation of 

^ the description, pages NONE 
1^ the .claims, Nos. NONE 
13 the drawings, sheets/fig NONE 

This repon has been established as if (some of) the amcndirents had not been made, since they have been considered to go 
beyond the disclosure as filed, as indicated in the Supplemental Box (Rule 70.2(c)).** 
* Replacement slieets wfiich fiave been furnished to tfie receiving Offxe in response to an invitation wider Anide 14 are referred to in 
this report as "'originally filed** and are not annexed to this report since they do not contain amendments (Rules 70. 16 and 70.17), 
** A}vy replacement sheet containing such amendmetus must be referred to under item I and annexed to tliis report. 
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V. Reasoned statement under Rule 66*2(a)(ii) with regard to novelty, inventive step or industrial applicability; 



citations and explanati ons supporting such stat&nent 
1. STATEMENT 

Novelty (N) Claims M7 ^YES 

Claims NONE ^NO 

Inventive Step (IS) Claims M7 YES 

Claims NONE _N0 

Industrial Applicability (lA) Claims M7 YES 

Claims NONE NO 



2. CITATIONS AND EXPLANATIONS 
Please See Continuation Sheet 
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(To be used when the space in any of the preceding boxes is not sufficient) 



International application No. 
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Y. 2. Citations and Explanations: 

Claims 1-17 meet the criteria set out in PCT Article 33(2)-(3), because the prior art does not teach or fairly suggest what is disclosed 
in the claims. 

As to claims 1-7, **Rogues MS-SheU Threat Analysis" does not teach or fairly suggest generating a plurality of keys in 
response to a received challenge. "Rogues MS-Shell Threat Analysis" does not teach or fairly suggest generating an initial value 
based upon a first key from the phiraiity of keys, "Rogues MS-ShcU Threat Analysis" does not teach or fairly suggest concatenating 
the initial value with a received signal to form an input value, where the received signal is transmitted from a communications unit 
communicativdy coupled to the subscriber identification module, and the received signal is generated by the communications unit 
using a second key from the plurality of keys. "Rogues MS-Shell Threat Analysis" does not teach or fairly suggest lliat the second 
key has been communicated from the subscriber identification module to the communications unit. ''Rogues MS-Shell Threat 
Analysis" does not teach or faidy suggest hashing the input value to form an authentication signal and transmitting Che authentication 
signal to the communications system via the communication unit. 

As to ciann 8-10, "Rogues MS-SheU Threat Analysis** does not leach or fairly suggest a key generation element. "Rogues 
MS-Shell Threat Analysis" does not teach or fairly suggest a signature generator configured to receive a secret key from the key 
generation element and information from a mobile unit and further configured to generate a signature that will be sent to the mobile 
unit. "Rogues MS-Shell Threat Analysis" does not teach or fairly suggest that concatenating the secret key with the information from 
the mobile unit and hashing the concatenated secret key and information generate the signature. 

As to claims 1 1-14, "Rogues MS-Shell Threat Analysis" does not teach or fairly suggest a key generator for generating a 
plurality of keys from a received value and a secret value. "Rogues MS-Shell Threat Analysis' does not teach or fairly suggest that at 
least one communication key from the plurality of keys is delivered to the communications unit. "Rogues MS-Shell Threat Analysis" 
does not teach or fairly suggest that at least one secret key from the plurality of keys is not delivered to the communications unit. 
"Rogues MS-Shell Threat Analysis" does not teach or fairly suggest a signature generator for generating an authorization signal form 
hashing a version of at least one secret key together with an authorization message. "Rogues MS-Shell Threat Analysis" does not 
teach or fairly suggest that the communications unit using a versk>n of at least on communication key generates the authorization 
message. 

As to claims 15-17, "Rogues MS-Shell Threat Analysis" does not teach or fairly suggest generating a plurality of keys. 
"Rogues MS-Shell Threat Analysis" docs not teach or fairly suggest transmitting at least one key from the plurality of keys to a 
communications device communicatively coupled to the subscriber identification device and holding private at least one key from the 
plurality of keys. "Rogues MS-Shell Threat Analysis" does not teach or fairly suggest generating a signature at the communications 
device using both the key transmitted to the communications device and a transmission message. "Rogues MS-Shell Threat Analysis" 
does not teach or fairiy suggest that the generating is implemented by hashing a concatenated value formed from at least one key and 
the transmission message. "Rogues MS-Shell Threat Analysis" does not teach or fairly suggest transmitting the signature to the 
subscriber identification device or receiving the signature at die subscriber identification device. "Rogues MS-Shell Threat Analysis" 
does not teach or fairly suggest generating a primary signature from the received signaUire, where the generating is implemented by 
hashUig a concatenated value formed from the one private key and the signamre received from the communications device, "Rogues 



Form PCT/lPEA/409 (Continuation Sheet) (July 1998) 



INTERNATIONAL PRELIMINARY EXAMINATION REPORT 



International application No. 
PCTAJS02/16103 



Supplemental Box 

(To be used when the space in any of the preceding boxes is not sufficient) 



MS-Sbell Threat Analysis" does not teach or fairly suggest conveying the primary signature to a communications system. 

Claims 1-17 meet the criteria set out in PCT Article 33(4), uid thixs meet industrial applicability because method and apparatus 
for providing local authentication of subscribers traveling outside their home systems can be made or used in industry. 
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